Hello,
One feature commonly used for this is called sidHistory. When you create a
trust between your two domains and use something like Microsoft's ADMT tool
to migrate the users, it will populate the sidHistory attribute on the new
user account in the new domain. This sidHistory will allow the new user to
access resources(folders and files) that have had privileges assigned to the
old accounts.
This, however, should only be used as a temporary solution. It is often
used to get the migration going, but later on you will want to correct the
file and folder permissions and then remove sidHistory.
You will want to completely document your existing folder and file security
so that you can re-create the privileges using the new accounts.
DSRAZOR for Windows does this documentation very well. It will list
ownership and all permissions for your folders and files and allow you to
export this data. Then you use this to recreate the permissions using your
new users. There are several methods to achieve this: Going to each folder
where permissions were explicitly assigned and reassigning them by right
clicking on the file, or use something like Microsoft's subinacls to
automate it.
If you would like a demonstration of how DSRAZOR for Windows can assist you
then please contact us at
www.visualclick.com for a free online web
demonstration.
